Archive for September 13, 2024

Friday, September 13, 2024

Alternative Distribution for iPad Apps in EU

Apple (MacRumors):

Starting September 16:

  • Users in the EU can download iPadOS apps on the App Store and through alternative distribution. As mentioned in May, if you have entered into the Alternative Terms Addendum for Apps in the EU, iPadOS first annual installs will begin to accrue and the lower App Store commission rate will apply.
  • Alternative browser engines can be used in iPadOS apps.

Federico Viticci:

A real clipboard manager on my iPad, let’s go 🚀

Previously:

Inferring Typing From Sounds and Eyes

Mark Stockley:

The technique, developed at Durham University, the University of Surrey, and Royal Holloway University of London, builds on previous work to produce a more accurate way to guess your password by listening to the sound of you typing it on your keyboard.

The slight differences in the sounds each key makes is an unintentional leak of information, known as a “side channel”.

Michael Nolan (paper):

While the technique presented in this paper relies on contemporary machine-learning techniques, such attacks date back at least to the 1950s, when British intelligence services surreptitiously recorded mechanical encryption devices employed by the Egyptian government.

Matt Burgess (Hacker News):

Today, a group of six computer scientists are revealing a new attack against Apple’s Vision Pro mixed reality headset where exposed eye-tracking data allowed them to decipher what people entered on the device’s virtual keyboard. The attack, dubbed GAZEploit and shared exclusively with WIRED, allowed the researchers to successfully reconstruct passwords, PINs, and messages people typed with their eyes.

[…]

To be clear, the researchers did not gain access to Apple’s headset to see what they were viewing. Instead, they worked out what people were typing by remotely analyzing the eye movements of a virtual avatar [EyeSight] created by the Vision Pro.

Joe Rossignol:

The proof-of-concept attack was not exploited in the wild, according to the report. Nonetheless, Vision Pro users should immediately update the headset to visionOS 1.3 or later to ensure they are protected, now that the findings have been shared publicly.

Previously:

Canceling the Unity Runtime Fee

Matt Bromberg (via Tim Sweeney, Hacker News):

We want to deliver value at a fair price in the right way so that you will continue to feel comfortable building your business over the long term with Unity as your partner. And we’re confident that if we’re good partners and deliver great software and services, we’ve barely scratched the surface of what we can do together.

So we’re reverting to our existing seat-based subscription model for all gaming customers, including those who adopt Unity 6, the most performant and stable version of Unity yet, later this year.

[…]

Unity Personal will remain free, and we’ll be doubling the current revenue and funding ceiling from $100,000 to $200,000 USD. This means more of you can use Unity at no cost.

[…]

Unity Pro: An 8% subscription price increase to $2,200 USD annually per seat will apply to Unity Pro.

[…]

A 25% subscription price increase will apply to Unity Enterprise. Unity Enterprise will be required for customers with more than $25 million USD of total annual revenue and funding.

Rui Carmo:

I mostly liked Unity and might go back to fiddling with it if I ever find the time, but to be honest Godot is a much better fit for my kids’ projects and I love the way it’s such a small, nimble engine that you can download and run on just about anything.

But I just have to thank them for having effectively bolted a jetpack onto the Godot community, because it’s been a wild ride and I’ve learned a lot playing with it over the past year.

Also, they apparently went to the trouble of removing/redirected the former announcement–but the Internet never forgets[…]

Previously:

StopTheMadness Pro 9

Jeff Johnson:

This new feature allows you to run your own custom scripts at any time on any web page. Your scripts can be triggered from the StopTheMadness Pro extension popup window, from a keyboard shortcut, and in macOS Safari from the contextual menu. JavaScript snippets are intended as an alternative to bookmarklets, which have several downsides such as the necessity to URL-encode your JavaScript.

[…]

The JavaScript snippets feature is not available in Google Chrome or Chromium web browsers, unfortunately, due to limitations of Chrome extension manifest version 3. JavaScript snippets are supported in Safari on both macOS and iOS, as well as in Firefox.

It’s a kind of an OSA Menu/FastScripts for Web pages. There’s more information about how it works here.

Jeff Johnson:

It’s frustrating when people ask me to enable StopTheMadness support for Safari web apps. The problem is Apple, not me! Apple chose to support content blockers and web extensions but not app extensions in Safari web apps. But it’s difficult to explain the technical difference to users.

David Johnson:

Web Apps on macOS Sequoia and Sonoma support Safari Web Extensions and Content Blockers when you have Safari 18 installed. We hear the request for extensions in more places on iOS.

Previously: